CVE-2021-25908

Name of the Vulnerable Software and Affected Versions fil-ocl crate versions prior to 2021-01-04

Description The issue is related to a double free error in the From<EventList> implementation. Affected versions of the crate use ptr::read to read from a container in From<EventList>, and then call a user-specified Into<Event> function. If the user-provided function panics, it can result in a double-free error.

Recommendations For fil-ocl crate versions prior to 2021-01-04, consider updating to a version released after 2021-01-04 to resolve the issue. As a temporary workaround, consider avoiding the use of From<EventList> with user-provided Into<Event> functions that may panic.